Extracted

• • Target

    JaffaCakes118_042418d3cc5d663658c0676fb46444fc

  • Size

    608KB

  • MD5

    042418d3cc5d663658c0676fb46444fc

  • SHA1

    d5afcb1186e599555abf7acbb2802b890355619b

  • SHA256

    3e5f69a0d1f18c5151c4f7b8220b342b395e8bf50f5610c52651878646b9e1b8

  • SHA512

    41b48ad4861f723aae00013fd65c7498817308c8a6d26070726b8f559e9b5406f975d1b5b71c6e4e6cebf6e90b6a5552b739d16c4834e3c39d90bdb8e89172d7

  • SSDEEP

    12288:hZGQdqOG9IJqydLqQSeCqsVK8kPRGO35N9mV8zXc6:hZ0+WjeCVVK8kP9N9oQ

  Score

  10^/10

  dridex10444botnetdiscoveryevasiontrojan

  • Dridex

    Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    botnetdridex

  • Dridex family

    dridex

  • Blocklisted process makes network request

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral1behavioral2